Legal & Policies

• Account information: name, email address
• Recovery profile: substances, goals, preferences (you control this)
• Usage data: journal entries, mood check-ins, goal progress
• App interactions: features used, session duration (anonymized)
• Device info: OS, browser type for technical support only

We never collect Social Security numbers, financial data, or precise GPS location without explicit permission.

• All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Journal entries and mood data are treated as sensitive health information
• AI conversations are processed securely and not used to train external AI models
• Access is role-based — only you can read your personal recovery data
• Regular security audits and penetration testing

• Sell your personal data to any third party — ever
• Share your recovery details with employers, insurers, or family without your consent
• Use your journal entries or mood data for advertising
• Transfer data outside compliant jurisdictions without safeguards
• Store payment card data (handled by PCI-DSS certified processors)

• Access: Request a full export of all your data at any time
• Correction: Update inaccurate information in your profile
• Deletion: Request immediate permanent deletion of all your data
• Portability: Receive your data in a machine-readable format (JSON/CSV)
• Opt-out: Disable analytics tracking at any time in profile settings

To exercise any of these rights, submit a request via the Support page and select "Data / Privacy Request."